Managing MFA on AzureAD

2020-02-06

Extract the default MFA notification method configured for a directory’s users

1
2
3
4
5
6
Get-Msoluser -All
| Select-Object @{N='SignInName';E={$_.SignInName}},
@{N='AccountBlocked';E={($_.BlockCredential)}},
@{N='MFA Status';E={if ($_.StrongAuthenticationRequirements.State){$_.StrongAuthenticationRequirements.State} else {"Disabled"}}},
@{N='MFA-DefaultMethod';E={($_.StrongAuthenticationMethods | where isdefault -eq 'true').MethodType}}
| Export-Csv -Path MFAStats.csv

Comments: